[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Entropy sources.
- To: Jon Paine <rivergarden@gmail.com>, tarsnap-users@tarsnap.com
- Subject: Re: Entropy sources.
- From: Colin Percival <cperciva@tarsnap.com>
- Date: Fri, 05 Jun 2015 01:44:46 -0700
- In-reply-to: <CADVRyo5tNHQkUHynie27xED=yF=cA-cnzW_mZwjz0PSt36g30g@mail.gmail.com>
- References: <CADVRyo5tNHQkUHynie27xED=yF=cA-cnzW_mZwjz0PSt36g30g@mail.gmail.com>
On 06/05/15 01:38, Jon Paine wrote:
> I'm a new user running tarsnap on Win7 with Cygwin.
>
> I work in Infosec / network security and am interested in where the entropy
> sources are coming from and how "good" they are, as this is a hot topic
> post-snowden.
>
> The answer is in the source code, I guess; but I am not a developer.
Yes, in libcperciva/util/entropy.c: Bits come from /dev/urandom. How exactly
that's implemented on cygwin, I have no idea though.
> The answer might be a good addition for the FAQ...?
In 8 years I think you're the first person to ask this, so it's definitely
not a frequently asked question yet!
--
Colin Percival
Security Officer Emeritus, FreeBSD | The power to serve
Founder, Tarsnap | www.tarsnap.com | Online backups for the truly paranoid